dhi.io/pgvector
pgvector 0.8.x for PostgreSQL 14.x
0.8-pg14, 0.8-pg14-debian, 0.8-pg14-debian13, 0.8.7-pg14, 0.8.7-pg14-debian, 0.8.7-pg14-debian13, pg14, pg14-debian, pg14-debian13
sha256:1b8f9c486e1f7eba75d196fd9f24b7502112ef8525255edd5455c474478e9ce8
Manifest digest:sha256:85309e791c43c46acc83bdd54c041d8fbdd3a9f70ff5e643f2c8653590c11044
Overview
Docker Hardened Images include comprehensive security attestations that verify the image's build process, contents, and security posture. This image is built using SLSA Build Level 3 practices. Additionally, this image includes a source attestation that links to a corresponding source image containing all build materials. The following attestations are available and can be verified using cosign.
Docker's DHI public key is available at https://registry.scout.docker.com/keyring/dhi/latest.pub and also archived at https://github.com/docker-hardened-images/keyring.
How to verify attestations
1. List all available attestations
docker scout attest list dhi.io/pgvector:0.8-pg142. Verify a specific attestation
For example, to verify the SLSA provenance attestation:
docker scout attest get dhi.io/pgvector:0.8-pg14 --predicate-type https://slsa.dev/provenance/v0.2 --verifyAttestations
All attestations are signed and can be verified with cosign.
| Predicate | Predicate type | Reference |
|---|---|---|
| CycloneDX SBOM v1.6 | https://cyclonedx.org/bom/v1.6 | dhi.io/pgvector@sha256:5fa581fe06a8e1df2e2435e47448c89bf00da6b9a57035d8df0113299c78330a |
| Changelog v0.1 | https://docker.com/dhi/changelog/v0.1 | dhi.io/pgvector@sha256:ba979b7717da16b7bbe2ce317f14978fe7e9af1135118c5fc40679615d332324 |
| DHI Image Sources v0.1 | https://docker.com/dhi/source/v0.1 | dhi.io/pgvector@sha256:97c40cde109eefc162a88b9eba818847bc74a33aa0c935edaf39e9cff10cfec3 |
| CVEs v0.2 | https://in-toto.io/attestation/vulns/v0.2 | dhi.io/pgvector@sha256:241edea32d4d170aa0f79c7a1f1c31854670241de7d1c5791e55ebf16902dca9 |
| VEX v0.2.0 | https://openvex.dev/ns/v0.2.0 | dhi.io/pgvector@sha256:5fde8b4ba2aad47a98eb7bbe6ae205a1aecfd1ea09b87066cf1cb34011fd5cbd |
| Scout provenance v0.1 | https://scout.docker.com/provenance/v0.1 | dhi.io/pgvector@sha256:04070d37e23a9a418bf88f0c40844eb31dc875f11d242d793251389a788d95ff |
| Scout SBOM v0.1 | https://scout.docker.com/sbom/v0.1 | dhi.io/pgvector@sha256:25623c07ab674de2403b286090f7ba52b55c46cc3a87d550d61e63efefebf834 |
| Secrets scan v0.1 | https://scout.docker.com/secrets/v0.1 | dhi.io/pgvector@sha256:e40a3d69fec4f753232bc4ae6d1a9546b1005d5f5cdd31ac8894b9235303f23c |
| Tests v0.1 | https://scout.docker.com/tests/v0.1 | dhi.io/pgvector@sha256:cfe988e09fd69c7931d6309e24003ab3ed4311377576220d5b54a09f6bc31a1c |
| Virus scan v0.1 | https://scout.docker.com/virus/v0.1 | dhi.io/pgvector@sha256:5775b0526d0422fb4ac0e944d874a321000638d7553add80e81cf182bfaed1c1 |
| CVEs v0.1 | https://scout.docker.com/vulnerabilities/v0.1 | dhi.io/pgvector@sha256:0e0acdf4ac83dab31f643825fca883b0f81a3cac594af2cf258c17044be3a254 |
| SLSA provenance v0.2 | https://slsa.dev/provenance/v0.2 | dhi.io/pgvector@sha256:e03b315b7aa35309733996dd8dfb07fa56c942c48ec55663ebcb7af87a24d5d1 |
| SLSA provenance v1 | https://slsa.dev/provenance/v1 | dhi.io/pgvector@sha256:bee2c43c835ea54f083f691ab7d5d89faa30798037a9029627df5dacc3ad0147 |
| SLSA verification summary v1 | https://slsa.dev/verification_summary/v1 | dhi.io/pgvector@sha256:f2016d7c10f0b1e15c30f292e86c738d8f55d0368ce49ec2cff45064f2e0aa74 |
| SPDX SBOM | https://spdx.dev/Document | dhi.io/pgvector@sha256:c83c8daf19fbb7b15146363f5258b8e7aed9a90ac78cd1aee1fa58e4a616df55 |